Purpose : As part of the Corporate Privacy Portfolio, the Privacy Coordinator, under the direction of the Chief Privacy Officer, is responsible for supporting compliance related to the Privacy Program and Health Information Standards across the Royal Ottawa Health Care Group. This includes adherence to policies and procedures related to Privacy legislation and regulatory standards.
Duties:- Works collaboratively with the Privacy Officer for the investigation and management of privacy breaches.
- Acts as a resource on matters related to privacy and access of personal health information for ROHCG.
- Participates on various task forces and committees where privacy is a factor.
- Assists with privacy breach investigations.
- Performs random and targeted privacy audits for compliance.
- Supports consent override investigations.
- Coordinates privacy breach and critical incident investigations and identifies, develops, and monitors risk mitigation plans.
- Assists in creating reports and submissions for the Office of the Information and Privacy Commissioner in response to investigations and reviews.
- Supports the response to requests made under the Freedom of Information and Privacy Protection Act.
- Knowledge of relevant Acts: Public Hospital’s Act, Mental Health Act of Ontario, Accreditation standards, Health Care Consent Act, Personal Health Information Protection Act, Freedom of Information and Protection of Privacy Act, privacy best practices, and industry standards.
- Monitors and stays current on relevant privacy, legal, technology, and other matters that may affect IPC requirements.
- Assists in the review of agreements with vendors, agencies, or providers to ensure relevant privacy provisions are included.
- Assists with privacy policies, including updating workflows, reviewing consent forms, consent workflows, consent directives, and interactions with police policy.
- Assists in Privacy Impact Assessments for new vendors, applications, and workflows being implemented at ROHCG.
- Supports education and awareness for privacy.
- Delivers orientation to new staff identifying the relevant policies and procedures.
- Other activities as assigned by the CPO/Director of Clinical Records.
- Works in a manner that complies with staff and patient/client safety practices, policies, and procedures of The Royal.
- Ensures a work environment that is conducive to the Royal’s Anti-Racism, Harassment, Discrimination-Free Workplace, and work safety policies and practices.
- Demonstrates commitment to health equity, values diversity, and contributes to an inclusive working environment.
Qualifications: - Two-year college diploma in Health Information Management.
- Three years of experience in privacy within a health care environment with expert knowledge of, and experience interpreting and applying privacy legislation.
- Thorough knowledge of privacy legislation in Ontario.
- Certification with and membership in 'good standing' with Canadian Health Information Management Association (CHIMA) required.
- International Association of Privacy Professionals (IAPP) certification is preferred.
- Strong oral and written presentation skills to effectively communicate with internal and external stakeholders.
- Demonstrated initiative and ability to manage multiple priorities and meet deadlines.
- Demonstrated accuracy and attention to detail.
- Excellent work performance and effective teamwork skills.
- Demonstrated confidentiality and privacy in a variety of situations.
- Knowledge and experience with Meditech is an asset.
- English level A- is mandatory in oral expression, comprehension, reading, and writing. Bilingual (French/English) is considered an asset.